PT-2013-5432

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which does not immediately transition into the locked state when the Lock Screen command is given through the Keychain Status menu. Instead, it reli...

PT-2013-5416

Name of the Vulnerable Software and Affected Versions CoreGraphics in Apple Mac OS X versions prior to 10.9 Description The issue allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration. Recommendations For CoreGraphics in Apple...

PT-2013-5421

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the kernel's handling of integer values during certain tty device operations. This can lead to a denial of service, causing the system to hang, when a local user triggers a...

PT-2013-5429

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the kernel's handling of multicast Wi-Fi packets. It does not properly check for errors during the processing of these packets, which can be exploited by remote attackers to...

PT-2013-5414

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue concerns the CoreGraphics component in Apple Mac OS X. When display-sleep mode is used, it does not ensure that screen locking blocks the visibility of all windows. This allows...

CVE-2013-5178: Undefined Security Weakness

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

PT-2013-5411

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue is related to the Bluetooth USB host controller, which can be exploited by local users to cause a denial of service, resulting in a system crash. This can be achieved through a crafte...

PT-2013-5437

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows local users to cause a denial of service, resulting in a system crash, by sending a request with a crafted port or port number. Recommendations For versions prior to 10.9, upda...

PT-2013-5420

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows local users to obtain sensitive information or cause a denial of service, resulting in an out-of-bounds read and system crash, via a crafted Mach-O file. Recommendations For...

PT-2013-5423

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows context-dependent attackers to spoof file extensions via a crafted character sequence due to improper restriction of Unicode characters in filenames by LaunchServices...

PT-2013-5418

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the random-number generator in the kernel, which provides lengthy exclusive access for processing large requests. This allows local users to cause a denial of service, resulti...

PT-2013-5426

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue concerns the auto-configuration feature in Mail, which selects plaintext authentication for certain servers that support CRAM-MD5 authentication. This allows remote attackers to obtai...

PT-2013-5424

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows attackers to bypass intended sandbox restrictions. This can be achieved by using a crafted app that utilizes the LaunchServices interface to specify process arguments...

PT-2013-5435

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the improper implementation of certificate-revocation checks in Smart Card Services. This allows remote attackers to cause a denial of service, specifically a Smart Card usage...

PT-2013-5413

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL. This is related to the Console in Apple Mac OS X...

PT-2013-5427

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message. This is achieved by using the multipart/signed content type within an unsigned...

PT-2013-5422

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue allows local users to cause a denial of service, resulting in a system panic, by utilizing an invalid iovec structure. Recommendations For versions prior to 10.9, update to version 10.9 or...

PT-2013-5436

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows local users to obtain sensitive information by leveraging access to the Guest account and reading console-log messages from previous Guest sessions. Recommendations For Apple M...

PT-2013-5425

Name of the Vulnerable Software and Affected Versions Libc in Apple Mac OS X versions prior to 10.9 Description The issue concerns the production of predictable values by the srandomdev function in Libc when the kernel random-number generator is unavailable. This predictability can be exploited b...

PT-2013-5433

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which fails to require a password when transitioning out of hibernation, allowing physically proximate attackers to gain access to an unattended...